CVE-2024-39584

🗓️ 28 Aug 2024 05:46:40Reported by dellType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 78 Views

Dell BIOS Default Cryptographic Key Vulnerability CVE-2024-3958

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of BIOS microprogramming software in Dell laptops, related to the use of default account information, allows attackers to circumvent existing security restrictions and execute arbitrary code.	11 Sep 202400:00	–	bdu_fstec
Circl	CVE-2024-39584	28 Aug 202409:16	–	circl
CNNVD	Dell Client Platform 安全漏洞	28 Aug 202400:00	–	cnnvd
Cvelist	CVE-2024-39584	28 Aug 202405:46	–	cvelist
Tenable Nessus	Dell Client BIOS Use of Default Cryptographic Key (DSA-2024-354)	29 Aug 202400:00	–	nessus
EUVD	EUVD-2024-38106	3 Oct 202520:07	–	euvd
NVD	CVE-2024-39584	28 Aug 202406:15	–	nvd
OSV	CVE-2024-39584	28 Aug 202406:15	–	osv
Positive Technologies	PT-2024-6025 · Dell · Dell Client Platform Bios	26 Jun 202400:00	–	ptsecurity
Vulnrichment	CVE-2024-39584	28 Aug 202405:46	–	vulnrichment

NVD

Vulners

Vulnrichment

Node

dell xps_8960_firmwareRange<2.12.0

AND

dell xps_8960Match-

Node

dell xps_8950_firmwareRange<1.21.0

AND

dell xps_8950Match-

Node

dell inspiron_3502_firmwareRange<1.18.0

AND

dell inspiron_3502Match-

Node

dell inspiron_15_3521_firmwareRange<1.16.0

AND

dell inspiron_15_3521Match-

Node

dell inspiron_15_3510_firmwareRange<1.21.0

AND

dell inspiron_15_3510Match-

Node

dell aurora_r16_firmwareRange<2.13.0

AND

dell aurora_r16Match-

Node

dell alienware_x17_r2_firmwareRange<1.22.0

AND

dell alienware_x17_r2Match-

Node

dell alienware_x17_r1_firmwareRange<1.24.0

AND

dell alienware_x17_r1Match-

Node

dell alienware_x15_r2_firmwareRange<1.22.0

AND

dell alienware_x15_r2Match-

Node

dell alienware_x15_r1_firmwareRange<1.24.0

AND

dell alienware_x15_r1Match-

Node

dell alienware_x14_firmwareRange<1.21.0

AND

dell alienware_x14Match-

Node

dell alienware_m17_r4_firmwareRange<1.24.0

AND

dell alienware_m17_r4Match-

Node

dell alienware_m17_r3_firmwareRange<1.29.0

AND

dell alienware_m17_r3Match-

Node

dell alienware_m15_r4_firmwareRange<1.24.0

AND

dell alienware_m15_r4Match-

Node

dell alienware_m15_r3_firmwareRange<1.29.0

AND

dell alienware_m15_r3Match-

Node

dell alienware_aurora_ryzen_edition_r14_firmwareRange<2.19.1

AND

dell alienware_aurora_ryzen_edition_r14Match-

Node

dell alienware_aurora_r15_amd_firmwareRange<1.15.0

AND

dell alienware_aurora_r15_amdMatch-

Node

dell alienware_aurora_r15_firmwareRange<1.17.0

AND

dell alienware_aurora_r15Match-

Node

dell alienware_aurora_r13_firmwareRange<1.21.0

AND

dell alienware_aurora_r13Match-

Node

dell alienware_area_51m_r2_firmwareRange<1.29.0

AND

dell alienware_area_51m_r2Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "Dell Client Platform BIOS",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "1.29.0",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      },
      {
        "lessThan": "1.15.0",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      },
      {
        "lessThan": "1.21.0",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      },
      {
        "lessThan": "1.24.0",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
dell	www.dell.com/support/kbdoc/en-us/000227594/dsa-2024-354

20 Dec 2024 14:38Current

8.1High risk

Vulners AI Score8.1

CVSS 3.18.2

EPSS0.0001

SSVC

CWE-1392